Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 43

Export CSV
CVE-2026-111497

Out-of-Bounds Write in Google Brotli Decoder

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

CVSS 4.0 · 9.2 Critical EPSS 82.6% KEV · Listed
Vendors
7-zip Andybalholm Anthropic and 14 more
Products
P7zip Brotli Bun and 61 more
CVE-2026-97631

Pre-boot RCE in EDK II PXE driver

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality, Integrity, and Availability.

CVSS 4.0 · 9.5 Critical EPSS < 1% KEV · Not listed
Vendors
Tianocore
Products
Edk2
CVE-2025-3770

SMM IDT Privilege Escalation Vulnerability

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Tianocore
Products
Edk2
CVE-2024-1298

Integer Overflow caused by divide by zero during S3 suspension

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Tianocore
Products
Enterprise Linux Rhel Aus Rhel E4s and 3 more
CVE-2025-2296

Un-verified kernel bypass Secure Boot mechanism in direct boot mode

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Tianocore
Products
Edk2
CVE-2024-38797

Out-of-bounds Read in HashPeImageByType()

EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Tianocore
Products
Edk2
CVE-2024-38798

Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege

EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability will lead to possible information disclosure or escalation of privilege and impact Confidentiality.

CVSS 4.0 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Tianocore
Products
Edk2
CVE-2025-2295

Potential iSCSI R2T PDU Vulnerability

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Tianocore
Products
Edk2
CVE-2024-38805

iSCSI Remote Memory Corruption and Denial of Service

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Tianocore
Products
Edk2
CVE-2025-2486

UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu

The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous versions inserted a secure-boot-based decision to continue running inside the Shell itself, which is believed to be sufficient to enforce Secure Boot restrictions. This is an additional repair on top of the incomplete fix for CVE-2023-48733.

CVSS 4.0 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Tianocore Ubuntu
Products
Ubuntu Edk2 Edk2 and 1 more
CVE-2023-45237

Use of a Weak PseudoRandom Number Generator in EDK II Network Package

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Tianocore
Products
Enterprise Linux Rhel Eus Edk2
CVE-2023-45236

Predictable TCP ISNs in EDK II Network Package

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Tianocore
Products
Enterprise Linux Rhel Eus Edk2
CVE-2023-45235

Buffer Overflow in EDK II Network Package

EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

CVSS 3.1 · 8.3 High EPSS 1.2% KEV · Not listed
Vendors
Redhat Tianocore
Products
Enterprise Linux Rhel Aus Rhel E4s and 3 more
CVE-2023-45234

Buffer Overflow in EDK II Network Package

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

CVSS 3.1 · 8.3 High EPSS 1.2% KEV · Not listed
Vendors
Redhat Tianocore
Products
Enterprise Linux Rhel Aus Rhel E4s and 3 more
CVE-2023-45233

Infinite loop in EDK II Network Package

EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability.

CVSS 3.1 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Redhat Tianocore
Products
Enterprise Linux Rhel Eus Edk2
CVE-2023-45232

Infinite loop in EDK II Network Package

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability.

CVSS 3.1 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Redhat Tianocore
Products
Enterprise Linux Rhel Eus Edk2
CVE-2023-45231

Out-of-Bounds Read in EDK II Network Package

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redirect message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Tianocore
Products
Enterprise Linux Rhel Eus Edk2
CVE-2023-45230

Buffer Overflow in EDK II Network Package

EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

CVSS 3.1 · 8.3 High EPSS 1.2% KEV · Not listed
Vendors
Redhat Tianocore
Products
Enterprise Linux Rhel Aus Rhel E4s and 3 more
CVE-2023-45229

Out-of-Bounds Read in EDK II Network Package

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Tianocore
Products
Enterprise Linux Rhel Eus Edk2
CVE-2022-36765

Integer Overflow in CreateHob

EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Redhat Tianocore
Products
Enterprise Linux Edk2